Customers of HSBC’s U.S.-based finance division are the latest victims of a data breach, the bank confirmed this week in a letter to the New Hampshire Attorney General. [More]
Have you handed your name, address, e-mail address, or phone number over to RadioShack as part of a purchase or, inexplicably, when you returned an item that you bought with cash? As the bankruptcy auction of the smoldering remains of The Shack continues into its second day, we’ve learned that one of the assets for sale is RadioShack’s customer list, which includes more than 65 million mailing addresses and more than 13 million e-mail addresses. Update: The bankruptcy auction’s privacy ombudsman says that customer information isn’t for sale. Yet. [More]
Just a month after tens of millions of consumers’ personal information was breached in the hack of health insurance firm Anthem, another U.S.-based insurance provider says it was the victim of a cyber attack affecting as many as 11 million customers. [More]
The 2015 tax season has been fraught with complications, from the fraudulent use of tax returns to the “dirty dozen” scams meant to tear consumers away from their money. During a Senate Finance Committee hearing exploring ways in which consumers could better be protected from such hustles, federal investigators divulged more information about one of the most prevalent tax-time scams in recent years, saying it has now targeted 366,000 taxpayers to the tune of $15.5 million. [More]
Each tax season fraudsters manage to separate taxpayers from billions of dollars by using aggressive schemes such as impersonating Internal Revenue Service agents or employing emails and websites designed to gather consumers’ personal information for fraudulent use. This year, the IRS has issued a list of the “Dirty Dozen” scams consumers should guard against. [More]
Whether you have a company-issued phone or you use your won for both work and play, finding love through dating apps on your device may increase the risk of a security breach for your employer, a new report from IBM says.
Morgan Stanley Fires Employee Accused Of Stealing Data From Up To 350K Clients, Posting Some Info Online
Another day, another bank reveals that client information was leaked where it shouldn’t have gone leaking: Morgan Stanley notified authorities and fired an employee accused of stealing data from up to 350,000 wealth-management clients and allegedly posting some of that information online.
A Colorado woman got more than she bargained for when ordering a fire starter for Home Depot: A box full of other people’s shredded checks and bank statements. [More]
Pop quiz time! What do Fandango and Credit Karma have in common? Yes, they both have really catchy (or annoying) advertisements. But that’s not the answer we were looking for. Give up? Okay, here it is: both companies allegedly deceived millions of consumers and put their personal information at risk. We never said it was a good thing to have in common. [More]
No one likes junk mail. It’s annoying, we agree. We never imagined one simple piece of mail could cause a family pain and trauma, but it did last week. An Illinois man received what at first appeared to be an ordinary mailing from OfficeMax, except under his name was the line “daughter killed in car crash”. [More]
We all know that there are companies out there sucking up consumers’ information and selling it — sometimes to people or entities they shouldn’t — but what no one really knows is exactly who has that data. While there are a few ways for consumers to check activity data on specific sites, there’s no catch-all resource for people to go to and see what their name/info is up to. The Federal Trade Commission wants to change that with a “Reclaim Your Name” proposal. [More]
Things get returned to retailers and sent back out to other customers. It happens. What isn’t supposed to happen is that one customer gets the item with all of the personal information of the person who returned it. That’s what happened to reader Justin when he bought some luggage for his wife from o.co, the retailer formerly known as Overstock.com, that had a tag filled out with the information of a stranger. [More]
We all know (or should know) by now that there’s a whole lot of information about us floating out there on the Internet. Companies like Facebook, Twitter, Google and others are busy collecting that info from data brokers and using it in ways seen and unseen. But it’s hard to put a finger on just what about you these companies have, something a new bill called the Right to Know Act is seeking to change in California.
Here’s what Ted wanted. He already has an XM Radio subscription, and he wanted to buy a replacement radio. His was broken, but Best Buy carries them, and Best Buy stores are everywhere. It couldn’t be that bad, could it? Just stop in, exchange money for radio, leave, walk out. Not so fast, there, Ted: Best Buy needs your name, address, and phone number before they can sell you a radio. And they have no idea why.
Someone signed up for Virgin Mobile, and used Shadee’s e-mail address by accident. She doesn’t particularly want someone else’s phone bills, so she contacted Virgin Mobile asking to have the problem resolved. They answered with a demand for her personal information: name, mailing address, and her phone number. Why do they need all of this information when she wants to get off their mailing list, not on it? So she reached out and posted on Virgin Mobile’s Facebook wall. The interactions that followed prove that while companies can assign staff to social media, it can’t make them actually listen to consumers.
Allen wanted to look at a new Dodge Charger. Not test-drive it. Just look at it, and maybe check out the interior or sit inside. But the dealership he visited wouldn’t let him even look at the car without taking down his name, address, driver’s license information, and phone number. Annoyed, he left the dealership and did a Google Images search or something instead.
In November, online game distributor Valve revealed that hackers breached the system. In a recent follow-up statement, Valve CEO Gabe Newell says hackers probably got a hold of transaction data, which includes encrypted credit card info and billing addresses, as well as user names and email addresses.